Commit Graph

804 Commits

Author SHA1 Message Date
R. Ryantm
2907074047 pdns-recursor: 4.7.0 -> 4.7.1 2022-08-01 04:26:07 +00:00
R. Ryantm
0e984ff3d0 nsd: 4.4.0 -> 4.6.0 2022-08-01 02:18:00 +00:00
R. Ryantm
79d65a8851 bind: 9.18.4 -> 9.18.5 2022-07-30 14:30:51 +00:00
Nick Cao
83657ee160
pdns: 4.6.2 -> 4.6.3, fix pname 2022-07-30 16:19:01 +08:00
Arnout Engelen
c52f737f27
Merge pull request #173904 from risicle/ris-bind-extra-passthru-tests
bind: add some more nixosTests to `passthru.tests`
2022-07-29 16:58:09 +02:00
Sandro Jäckel
4ddd633b5a
ncdns: mark broken 2022-07-15 23:51:14 +02:00
github-actions[bot]
86c34bf774
Merge master into staging-next 2022-06-27 12:01:26 +00:00
Robert Schütz
2847e6e691 bind: 9.18.3 -> 9.18.4
https://downloads.isc.org/isc/bind9/9.18.4/doc/arm/html/notes.html
2022-06-27 04:45:49 +00:00
github-actions[bot]
192fdf11fe
Merge master into staging-next 2022-06-25 00:02:10 +00:00
superherointj
8d8c50ba2f coredns: 1.9.2 -> 1.9.3 2022-06-20 14:44:38 -03:00
github-actions[bot]
5e3a16c8af
Merge staging-next into staging 2022-06-17 06:01:47 +00:00
Vladimír Čunát
c727dc76ee
Merge #177615: knot-resolver: 5.5.0 -> 5.5.1 2022-06-17 07:34:59 +02:00
github-actions[bot]
8c938c76c8
Merge staging-next into staging 2022-06-16 18:01:58 +00:00
rnhmjoj
b0b2bad541
pdns-recursor: 4.6.2 -> 4.7.0 2022-06-16 15:21:52 +02:00
github-actions[bot]
ca38c61118
Merge staging-next into staging 2022-06-16 00:02:52 +00:00
Jörg Thalheim
bb52e84b69
Merge pull request #174755 from helsinki-systems/clean/bind9
bind: remove broken configure flags
2022-06-15 19:55:30 +01:00
ajs124
496738486d dnsdist: 1.7.1 -> 1.7.2 2022-06-15 18:03:11 +02:00
Vladimír Čunát
bac638e75b
knot-resolver: 5.5.0 -> 5.5.1
https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.5.1
2022-06-14 10:41:50 +02:00
Fabian Affolter
f74debc95f dnsdist: 1.7.0 -> 1.7.1 2022-06-13 16:31:50 +02:00
Tobias Poschwatta
53c3bec163 bind: add default rndc.conf 2022-06-03 14:40:13 +02:00
ajs124
6a803b01ae bind: remove broken configure flags
configure: WARNING: unrecognized options: --without-atf, --without-docbook-xsl, --without-idn, --without-idnlib, --with-randomdev, --with-ecdsa, --with-gost, --without-eddsa, --with-aes, --with-libcap
2022-05-30 15:32:17 +02:00
Robert Scott
e9c36e2d76 coredns: fix tests on darwin 2022-05-25 22:45:19 +01:00
R. Ryantm
ff7d60fdcf coredns: 1.9.1 -> 1.9.2 2022-05-25 14:37:32 +00:00
Artturin
b3caa2f1fe treewide: extraPostFetch -> postFetch 2022-05-23 17:18:50 +03:00
Robert Scott
2830a7976f bind: add some more nixosTests to passthru.tests 2022-05-21 15:43:47 +01:00
Martin Weinelt
f33b07e728
bind: 9.18.1 -> 9.18.3
> An assertion failure can be triggered if a TLS connection to a
> configured http TLS listener with a defined endpoint is destroyed too
> early.

https://kb.isc.org/v1/docs/cve-2022-1183

Fixes: CVE-2022-1183
2022-05-20 01:20:16 +02:00
Vladimír Čunát
c84e5f8e1f
Merge #170909: knot-resolver: minor improvements 2022-05-06 16:27:57 +02:00
Bobby Rong
dbed5813eb
Merge pull request #170523 from armeenm/bump-pdns
pdns: 4.6.1 -> 4.6.2
2022-05-02 20:19:00 +08:00
Vladimír Čunát
9791289e84
knot-resolver: enable more tests
Apparently luarocks works now on aarch64-darwin.
2022-04-29 15:10:27 +02:00
Vladimír Čunát
3eab641238
knot-resolver: switch to systemdMinimal
It was in closure anyway, and this saves 62M from
 $ nix path-info -S ./result
Still, for those using the service this won't change the closure.
2022-04-29 15:10:25 +02:00
Vladimír Čunát
871065de22
knot: 3.1.7 -> 3.1.8
https://gitlab.nic.cz/knot/knot-dns/-/tags/v3.1.8
2022-04-28 13:44:41 +02:00
Armeen Mahdian
ab9d6e8f9d pdns: 4.6.1 -> 4.6.2 2022-04-26 17:16:06 -05:00
github-actions[bot]
1ebc1944ed
Merge master into staging-next 2022-04-10 06:01:27 +00:00
Sandro
1136ad6c65
Merge pull request #166333 from SuperSandro2000/doh-proxy 2022-04-10 03:25:32 +02:00
github-actions[bot]
f78cc67bac
Merge master into staging-next 2022-04-09 18:01:20 +00:00
R. Ryantm
82040f52c9 pdns-recursor: 4.6.1 -> 4.6.2 2022-04-08 17:26:24 +00:00
Guillaume Girol
45a5514f55
Merge pull request #166534 from vcunat/p/powerdns-32bit
powerdns: fix 32-bit builds against glibc
2022-04-05 19:42:04 +00:00
Vladimír Čunát
6b7bd8d06e
powerdns: fix typo
Co-authored-by: Guillaume Girol <symphorien@users.noreply.github.com>
2022-04-03 18:41:21 +02:00
7c6f434c
8188f10752
Merge pull request #166430 from alyssais/openssl-static-retry
treewide: use lib.getLib for OpenSSL libraries
2022-04-02 12:59:55 +00:00
Vladimír Čunát
f588040472
powerdns: fix 32-bit builds against glibc 2022-03-31 08:33:20 +02:00
Alyssa Ross
fd78240ac8
treewide: use lib.getLib for OpenSSL libraries
At some point, I'd like to make another attempt at
71f1f4884b ("openssl: stop static binaries referencing libs"), which
was reverted in 195c7da07d.  One problem with my previous attempt is
that I moved OpenSSL's libraries to a lib output, but many dependent
packages were hardcoding the out output as the location of the
libraries.  This patch fixes every such case I could find in the tree.
It won't have any effect immediately, but will mean these packages
will automatically use an OpenSSL lib output if it is reintroduced in
future.

This patch should cause very few rebuilds, because it shouldn't make
any change at all to most packages I'm touching.  The few rebuilds
that are introduced come from when I've changed a package builder not
to use variable names like openssl.out in scripts / substitution
patterns, which would be confusing since they don't hardcode the
output any more.

I started by making the following global replacements:

    ${pkgs.openssl.out}/lib -> ${lib.getLib pkgs.openssl}/lib
    ${openssl.out}/lib -> ${lib.getLib openssl}/lib

Then I removed the ".out" suffix when part of the argument to
lib.makeLibraryPath, since that function uses lib.getLib internally.

Then I fixed up cases where openssl was part of the -L flag to the
compiler/linker, since that unambigously is referring to libraries.

Then I manually investigated and fixed the following packages:

 - pycurl
 - citrix-workspace
 - ppp
 - wraith
 - unbound
 - gambit
 - acl2

I'm reasonably confindent in my fixes for all of them.

For acl2, since the openssl library paths are manually provided above
anyway, I don't think openssl is required separately as a build input
at all.  Removing it doesn't make a difference to the output size, the
file list, or the closure.

I've tested evaluation with the OfBorg meta checks, to protect against
introducing evaluation failures.
2022-03-30 15:10:00 +00:00
Sandro Jäckel
4bba51b8d0
doh-proxy: drop 2022-03-30 17:08:53 +02:00
Vladimír Čunát
2a5a99c586
knot-dns: 3.1.6 -> 3.1.7
This version primarily fixes incomplete implementation of
the Offline KSK signing mode in the IXFR and DDNS processing.

https://gitlab.nic.cz/knot/knot-dns/-/tags/v3.1.7
2022-03-30 10:23:34 +02:00
Martin Weinelt
999f3c2b9d
pdns: rename from powerdns
https://github.com/PowerDNS/pdns
https://repology.org/project/pdns/versions
2022-03-28 18:04:19 +02:00
Martin Weinelt
0165645499
Merge pull request #164116 from NickCao/powerdns 2022-03-28 17:34:07 +02:00
Sandro
970a37ff47
Merge pull request #165962 from SuperSandro2000/bind 2022-03-28 16:34:13 +02:00
Nick Cao
fc49bc19ed
powerdns: redact configure flags from version output to reduce closure size 2022-03-28 22:05:39 +08:00
Nick Cao
e85e545dbd
powerdns: 4.3.1 -> 4.6.1 2022-03-28 22:05:31 +08:00
Sandro
b53ee0c6eb
bind: add meta.changelog 2022-03-27 17:48:45 +02:00
rnhmjoj
e501354c13
pdns-recursor: 4.6.0 -> 4.6.1 2022-03-26 23:26:28 +01:00
Peter Hoeg
39f24ef7a0 https-dns-proxy: 2020-04-19 -> 2021-03-29 2022-03-24 15:36:28 +08:00
Vladimír Čunát
1a9a8d2ec0
Merge #164261: knot-resolver: 5.4.4 -> 5.5.0 2022-03-19 21:54:45 +01:00
Robert Scott
3eb0953ae8
Merge pull request #164586 from mweinelt/bind9
bind: 9.18.0 -> 9.18.1
2022-03-19 11:26:16 +00:00
Bobby Rong
5eeca624d5
Merge pull request #163756 from r-ryantm/auto-update/coredns
coredns: 1.9.0 -> 1.9.1
2022-03-18 10:38:36 +08:00
Martin Weinelt
8c2ee334e5
bind: 9.18.0 -> 9.18.1
https://downloads.isc.org/isc/bind9/9.18.1/RELEASE-NOTES-bind-9.18.1.html

Fixes: CVE-2021-25220, CVE-2022-0396, CVE-2022-0635, CVE-2022-0667
2022-03-17 13:16:02 +01:00
superherointj
2578e884f9 coredns: enable tests 2022-03-16 10:42:28 -03:00
Vladimír Čunát
a1a2ae2955
knot-resolver: 5.4.4 -> 5.5.0
https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.5.0
2022-03-15 13:42:23 +01:00
R. Ryantm
138471e084 coredns: 1.9.0 -> 1.9.1 2022-03-12 05:23:45 +00:00
Luflosi
65b2a74267
bind: 9.16.25 -> 9.18.0 (#161427) 2022-03-07 12:54:11 +01:00
R. Ryantm
b20eba3135 nsd: 4.3.9 -> 4.4.0 2022-02-19 11:56:36 +00:00
R. Ryantm
353338bfb0 coredns: 1.8.6 -> 1.9.0 2022-02-12 21:23:50 -08:00
Vladimír Čunát
043cccef2c knot-dns: 3.1.5 -> 3.1.6
https://gitlab.nic.cz/knot/knot-dns/-/tags/v3.1.6
2022-02-08 12:02:16 -08:00
Thomas Gerbet
4cfcbac24a bind: 9.16.16 -> 9.16.25
Fixes CVE-2021-25219.
https://downloads.isc.org/isc/bind9/9.16.25/doc/arm/html/notes.html
2022-01-28 13:28:20 +01:00
Fabian Möller
4329d79dba
nixos/tests: link tests to their packages 2022-01-23 21:08:10 +01:00
Johannes Schleifenbaum
9dfed5c9aa
dnsdist: adopt 2022-01-19 08:24:03 +01:00
Johannes Schleifenbaum
612ad7776a
nixos/dnsdist: add test 2022-01-19 08:24:02 +01:00
Johannes Schleifenbaum
30ae792cd0
dnsdist: 1.5.2 -> 1.7.0 2022-01-18 08:59:18 +01:00
Vladimír Čunát
1071b77c21
knot-resolver: 5.4.3 -> 5.4.4
This is basically just no-op.  Only version number changes.
https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.4.4
2022-01-05 15:28:59 +01:00
R. Ryantm
22eb1ae0fe nsd: 4.3.8 -> 4.3.9 2021-12-31 11:20:10 -08:00
Michele Guerini Rocco
41716bad68
Merge pull request #151877 from rnhmjoj/pr-pdns
pdns-recursor: 4.5.7 -> 4.6.0
2021-12-23 21:22:33 +01:00
rnhmjoj
390341ca9f
pdns-recursor: 4.5.7 -> 4.6.0 2021-12-23 10:45:18 +01:00
Vladimír Čunát
b1c17320af
knot-dns: make passthru.tests usable on non-Linux 2021-12-20 17:17:55 +01:00
Vladimír Čunát
c83103e77c
knot-dns: add knot-resolver build into passthru.tests 2021-12-20 16:43:21 +01:00
Vladimír Čunát
0fe64c6929
knot-dns: 3.1.4 -> 3.1.5
https://gitlab.nic.cz/knot/knot-dns/-/tags/v3.1.5
2021-12-20 16:19:44 +01:00
Christoph Hrdinka
d22679258c
Merge pull request #149758 from r-ryantm/auto-update/nsd
nsd: 4.3.7 -> 4.3.8
2021-12-10 09:04:23 +01:00
Vladimír Čunát
02d8ed2eb1
knot-resolver: patch a possibly unpleasant issue
No more releasing in 2021.
2021-12-09 19:30:31 +01:00
R. Ryantm
606989ee28 nsd: 4.3.7 -> 4.3.8 2021-12-09 00:54:11 +00:00
Vladimír Čunát
93ee1a9cb0
knot-resolver: 5.4.2 -> 5.4.3
https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.4.3
2021-12-01 13:32:57 +01:00
rnhmjoj
ade2d34d4f
pdns-recursor: 4.5.6 -> 4.5.7 2021-11-28 01:11:09 +01:00
Mario Rodas
15eb7667f5
Merge pull request #143607 from r-ryantm/auto-update/coredns
coredns: 1.8.5 -> 1.8.6
2021-11-14 21:11:12 -05:00
Vladimír Čunát
539431e684
knot-dns: 3.1.3 -> 3.1.4
https://gitlab.nic.cz/knot/knot-dns/-/tags/v3.1.4
2021-11-04 12:02:21 +01:00
illustris
185e6a477a sssd: 1.16.5 -> 2.6.0, fix broken build 2021-10-30 09:48:28 -07:00
R. Ryantm
f35024ee2c coredns: 1.8.5 -> 1.8.6 2021-10-29 08:30:10 +00:00
Vladimír Čunát
744b081e75
knot-dns: 3.1.2 -> 3.1.3
https://gitlab.nic.cz/knot/knot-dns/-/tags/v3.1.3
2021-10-18 19:34:47 +02:00
Michele Guerini Rocco
e90bc337f0
Merge pull request #142006 from rnhmjoj/pr-pdns
pdns-recursor: 4.5.4 -> 4.5.6
2021-10-17 23:48:45 +02:00
rnhmjoj
f13b08e900
pdns-recursor: 4.5.4 -> 4.5.6 2021-10-17 17:26:50 +02:00
Vladimír Čunát
e705a3e5bf
Merge #141489: knot-resolver: 5.4.1 -> 5.4.2 2021-10-16 22:04:11 +02:00
Peter Simons
476635afe1 Drop myself from meta.maintainers for most packages.
I'd like to reduce the number of Github notifications and
review requests I receive.
2021-10-14 11:01:27 +02:00
Vladimír Čunát
4329cbdcc4
knot-resolver: 5.4.1 -> 5.4.2
https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.4.2
2021-10-13 13:21:50 +02:00
figsoda
b9912f3d90 doh-proxy-rust: 0.3.8 -> 0.9.2, switch to fetchCrate, remove patch 2021-10-07 09:29:34 -04:00
R. RyanTM
b81a0ff256 coredns: 1.8.4 -> 1.8.5 2021-09-22 03:28:28 +00:00
Sandro
98c973aab7
Merge pull request #137137 from rnhmjoj/ncdns
ncdns: 2020-11-22 -> 2021-07-18
2021-09-11 23:52:45 +02:00
rnhmjoj
7a9f5d69c8
ncdns: 2020-11-22 -> 2021-07-18 2021-09-11 23:22:45 +02:00
Vladimír Čunát
12c40d9972
knot-dns: 3.1.1 -> 3.1.2
https://gitlab.nic.cz/knot/knot-dns/-/tags/v3.1.2
The patch was included in this release.
2021-09-08 16:58:39 +02:00
Vladimír Čunát
39688bfb41
knot-dns: upstream patch that should fix aarch64-darwin 2021-09-05 20:47:12 +02:00
Vladimír Čunát
c0238e110a
knot-resolver: 5.4.0 -> 5.4.1
https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.4.1
2021-08-19 14:58:08 +02:00
Ilan Joselevich
3f1cb5c13e nsd: 4.3.5 -> 4.3.7 2021-08-15 20:00:31 +03:00
Vladimír Čunát
b1655a0c1c
knot-dns: 3.1.0 -> 3.1.1
https://gitlab.nic.cz/knot/knot-dns/-/tags/v3.1.1
2021-08-10 10:21:50 +02:00
Vladimír Čunát
18ed0855ba
knot-dns: only depend on libmnl on Linux
I didn't realize that it's only relevant for Linux,
and it unnecessarily disabled builds for *-darwin.
2021-08-02 18:51:26 +02:00
Vladimír Čunát
43c5cae2c6
Merge #132422: knot-dns: disable tests broken on aarch64-darwin 2021-08-02 17:56:41 +02:00
Vladimír Čunát
895ce97eea
knot-dns: disable tests broken on aarch64-darwin
Upstream is aware but they don't have a fix yet.
I'm not aware of NixPkgs being used for another platform
affected by this (e.g. ppc64le).
2021-08-02 16:29:01 +02:00
Sandro Jäckel
0b06ccd7be
knot-dns: cleanup 2021-08-02 13:12:10 +02:00
Vladimír Čunát
2afe544fe5
knot-dns: 3.0.8 -> 3.1.0
NEWS + migration guide:
https://gitlab.nic.cz/knot/knot-dns/-/tags/v3.1.0
https://www.knot-dns.cz/docs/3.1/html/migration.html#upgrade-3-0-x-to-3-1-x
2021-08-02 09:18:06 +02:00
Vladimír Čunát
88742cf661
knot-resolver: 5.3.2 -> 5.4.0
https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.4.0
It's a prerequisite to updating knot-dns to >= 3.1.0.
2021-07-29 17:14:37 +02:00
Sandro Jäckel
9bfdf57e13
pythonPackages: deprecate pytestrunner alias 2021-07-21 13:32:49 +02:00
Sandro Jäckel
4209fed914
pythonPackages: deprecate pytestcov alias 2021-07-21 13:32:17 +02:00
Vladimír Čunát
6582dd7e12
knot-dns: 3.0.7 -> 3.0.8
https://gitlab.nic.cz/knot/knot-dns/-/tags/v3.0.8
2021-07-16 12:40:07 +02:00
rnhmjoj
90f9b70423
pdns-recursor: 4.5.2 -> 4.5.4 2021-07-07 09:13:33 +02:00
Vladimír Čunát
c265f50e2f
knot-dns: verbose output in case some test fails
aarch64-darwin started to fail one test-set after the last update,
and so far we have no idea why.  I don't have access to such a machine,
and this option will be nice anyway.
2021-06-23 15:09:14 +02:00
Vladimír Čunát
cf0b179b5e
knot-dns: add passthru.tests
I hope I got the conventions right (found in doc/stdenv/meta.chapter.md)
2021-06-16 12:56:36 +02:00
Vladimír Čunát
28dd3b6177
knot-dns: 3.0.6 -> 3.0.7
Fixes various bugs and introduces a few requested features.
https://gitlab.nic.cz/knot/knot-dns/-/tags/v3.0.7
2021-06-16 08:34:17 +02:00
rnhmjoj
07a8f0c95f
pdns-recursor: fix ambiguous license 2021-06-13 11:03:16 +02:00
rnhmjoj
79f7b9652f
pdns-recursor: 2.5.1 -> 2.5.2 2021-06-13 09:49:14 +02:00
Vladimír Čunát
389f628c08
knot-resolver: skip tests on aarch64-darwin (for now)
It used to build in a previous iteration
https://hydra.nixos.org/job/nixpkgs/aarch64-darwin/knot-resolver.aarch64-darwin
so I expect it will work without these tests
(I have no access to a darwin machine).
2021-06-11 20:39:06 +02:00
Michele Guerini Rocco
a8e4f721aa
Merge pull request #125392 from rnhmjoj/pdns
pdns-recursor: disable on i686-linux
2021-06-02 20:48:50 +02:00
rnhmjoj
cbfd8831a1
pdns-recursor: disable on i686-linux
Support for 32-bit platforms with no 64-bit time_t has ended.
See https://mailman.powerdns.com/pipermail/pdns-users/2021-May/027220.html
2021-06-02 19:18:17 +02:00
R. RyanTM
d491dd7313 coredns: 1.8.3 -> 1.8.4 2021-05-29 02:41:42 +00:00
Jonathan Ringer
6b15fdce86
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
 pkgs/shells/ion/default.nix
 pkgs/tools/misc/cicero-tui/default.nix
2021-05-20 22:11:42 -07:00
rnhmjoj
7e54c9b956 pdns-recursor: 4.4.3 -> 4.5.1 2021-05-20 14:37:05 -07:00
Jonathan Ringer
14f3686af1
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
  pkgs/applications/terminal-emulators/alacritty/default.nix
  pkgs/servers/clickhouse/default.nix
2021-05-20 09:12:42 -07:00
R. RyanTM
d0335f16b5 bind: 9.16.15 -> 9.16.16 2021-05-20 10:21:52 +00:00
Jonathan Ringer
f7a112f6c4
Merge remote-tracking branch 'origin/master' into staging-next
Conflicts:
  pkgs/applications/graphics/emulsion/default.nix
  pkgs/development/tools/misc/texlab/default.nix
  pkgs/development/tools/rust/bindgen/default.nix
  pkgs/development/tools/rust/cargo-udeps/default.nix
  pkgs/misc/emulators/ruffle/default.nix
  pkgs/tools/misc/code-minimap/default.nix
2021-05-18 08:57:16 -07:00
R. RyanTM
1dd189caea dnsdist: 1.5.1 -> 1.5.2 2021-05-17 13:45:02 -07:00
github-actions[bot]
b057978bb2
Merge staging-next into staging 2021-05-12 18:32:29 +00:00
Vladimír Čunát
bde27b4e97
knot-dns: 3.0.5 -> 3.0.6
https://gitlab.nic.cz/knot/knot-dns/-/tags/v3.0.6
2021-05-12 12:55:41 +02:00
Daniël de Kok
85f96822a0 treewide: fix cargoSha256/cargoHash
Rust 1.50.0 incorporated a Cargo change (rust-lang/cargo#8937) in
which cargo vendor erroneously changed permissions of vendored
crates. This was fixed in Rust
1.51.0 (rust-lang/cargo#9131). Unfortunately, this means that all
cargoSha256/cargoHashes produced during the Rust 1.50.0 cycle are
potentially broken.

This change updates cargoSha256/cargoHash tree-wide.

Fixes #121994.
2021-05-08 00:36:37 -07:00
Vladimír Čunát
fed7086f21
knot-resolver: clean the expression a bit 2021-05-05 13:34:10 +02:00
Vladimír Čunát
fdd9671234
knot-resolver: 5.3.1 -> 5.3.2
https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.3.2
2021-05-05 11:45:27 +02:00
Martin Weinelt
84b6596098
bind: 9.16.13 -> 9.16.15
https://kb.isc.org/docs/cve-2021-25214

https://kb.isc.org/docs/cve-2021-25215

https://kb.isc.org/docs/cve-2021-25216

Fixes: CVE-2021-25214, CVE-2021-25215, CVE-2021-25216
2021-04-29 03:39:40 +02:00
rnhmjoj
754e384fce
pdns-recursor: 4.4.2 -> 4.4.3 2021-04-24 11:58:34 +02:00
Stéphan Kochen
20481bd027 doh-proxy-rust: init at 0.3.8 2021-04-07 14:23:55 +02:00
Robert Scott
cf15f8f8d3
Merge pull request #117003 from r-ryantm/auto-update/bind
bind: 9.16.12 -> 9.16.13
2021-04-02 19:31:39 +01:00
Vladimír Čunát
3dee9271d7
knot-resolver: 5.3.0 -> 5.3.1
https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.3.1
2021-03-31 20:26:17 +02:00
Vladimír Čunát
598b62f310
knot-dns: 3.0.4 -> 3.0.5
https://gitlab.nic.cz/knot/knot-dns/-/tags/v3.0.5
2021-03-25 13:32:50 +01:00
R. RyanTM
602499378d bind: 9.16.12 -> 9.16.13 2021-03-20 01:51:13 +00:00
Sandro Jäckel
9bbd026fcd
pdns-recursor: cleanup 2021-03-05 18:15:24 +01:00
Mario Rodas
a715e04629
Merge pull request #114326 from r-ryantm/auto-update/coredns
coredns: 1.8.1 -> 1.8.3
2021-02-25 23:53:55 -05:00
Vladimír Čunát
d464a379d1
knot-resolver: 5.2.1 -> 5.3.0
https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.3.0
2021-02-25 15:08:18 +01:00
R. RyanTM
b2a6de3b62 coredns: 1.8.1 -> 1.8.3 2021-02-25 08:19:10 +00:00
R. RyanTM
9b2e8cac52 bind: 9.16.11 -> 9.16.12 2021-02-22 02:17:24 -05:00
R. RyanTM
bfdad7a52c nsd: 4.3.4 -> 4.3.5 2021-01-30 20:56:29 +00:00
R. RyanTM
5854a34ede bind: 9.16.10 -> 9.16.11 2021-01-28 10:07:22 -05:00
Pavol Rusnak
a6ce00c50c
treewide: remove stdenv where not needed 2021-01-25 18:31:47 +01:00
R. RyanTM
a3b4695042
coredns: 1.8.0 -> 1.8.1 (#110343) 2021-01-21 09:51:38 -08:00
Vladimír Čunát
56ef9942f1
knot-dns: 3.0.3 -> 3.0.4
https://gitlab.nic.cz/knot/knot-dns/-/tags/v3.0.4
2021-01-20 21:28:10 +01:00
Jonathan Ringer
9bb3fccb5b treewide: pkgs.pkgconfig -> pkgs.pkg-config, move pkgconfig to alias.nix
continuation of #109595

pkgconfig was aliased in 2018, however, it remained in
all-packages.nix due to its wide usage. This cleans
up the remaining references to pkgs.pkgsconfig and
moves the entry to aliases.nix.

python3Packages.pkgconfig remained unchanged because
it's the canonical name of the upstream package
on pypi.
2021-01-19 01:16:25 -08:00
Ben Siraphob
872973d7d1 pkgs/servers: stdenv.lib -> lib 2021-01-15 14:24:03 +07:00
Profpatsch
4a7f99d55d treewide: with stdenv.lib; in meta -> with lib;
Part of: https://github.com/NixOS/nixpkgs/issues/108938

meta = with stdenv.lib;

is a widely used pattern. We want to slowly remove
the `stdenv.lib` indirection and encourage people
to use `lib` directly. Thus let’s start with the meta
field.

This used a rewriting script to mostly automatically
replace all occurances of this pattern, and add the
`lib` argument to the package header if it doesn’t
exist yet.

The script in its current form is available at
https://cs.tvl.fyi/depot@2f807d7f141068d2d60676a89213eaa5353ca6e0/-/blob/users/Profpatsch/nixpkgs-rewriter/default.nix
2021-01-11 10:38:22 +01:00
Vladimír Čunát
9af686703d
powerdns: patch build with gcc 10 2021-01-04 19:14:09 +01:00
Michele Guerini Rocco
3f67972103
Merge pull request #108295 from rnhmjoj/pdns
pdns-recursor: 4.4.1 -> 4.4.2
2021-01-03 13:59:14 +01:00
rnhmjoj
9f5e31e926
pdns-recursor: 4.4.1 -> 4.4.2 2021-01-03 10:05:20 +01:00
Colin L Rice
71d479fbd3 ncdns: Update to 2020-11-22 to remove go1.14 dep.
I've poked them to tag a new version at
https://github.com/namecoin/ncdns/issues/126, but master builds cleanly
with go1.15, so I just updated to unstable
2020-12-30 00:01:49 -05:00
Tim Steinbach
87e7d8b371
bind: 9.16.8 -> 9.16.10 2020-12-23 10:15:35 -05:00
Vladimír Čunát
818c3001e8
knot-dns: 3.0.2 -> 3.0.3
https://gitlab.nic.cz/knot/knot-dns/-/tags/v3.0.3
2020-12-15 16:58:56 +01:00
Vladimír Čunát
ace04464b6
knot-resolver: 5.2.0 -> 5.2.1
https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.2.1
2020-12-09 11:07:28 +01:00
R. RyanTM
ea7b8d5ce9 nsd: 4.3.3 -> 4.3.4 2020-12-06 14:28:11 +00:00
R. RyanTM
694a371f12 pdns-recursor: 4.4.0 -> 4.4.1 2020-11-29 05:40:58 +00:00
Ben Wolsieffer
82a9f2331c bind: fix cross-compilation
Upstream accidently broke cross-compilation. It has been fixed but not released
yet, so we temporarily add the patch here.
2020-11-19 21:49:19 +01:00
Vladimír Čunát
9a38c3a11b
knot-resolver: fix evaluation on darwin
I somehow forgot that libcap_ng is linux-only.  I'm missing ofborg's
darwin builder, but I might've tested evaluation at least...
2020-11-18 08:41:28 +01:00
Vladimír Čunát
335798d243
knot-resolver: fix a stupid system breaking non-systemd
I hope this will fix darwin build (no good way of testing locally).
2020-11-17 20:05:51 +01:00
Vladimír Čunát
cd5c7c0ee6
knot-resolver: drop capabilities after startup
By default.  I forgot to add this a long time ago.
The difference in runtime closure is really tiny (232 KiB by du).
2020-11-17 20:04:56 +01:00
Vladimír Čunát
3087df3e8f
knot-resolver: add support for new DoH implementation
By default.  I'm not a DoH fan, but the difference in runtime closure
is really tiny (216 KiB by du).  I somehow forgot this during update.

Some of the newly running tests were failing and got disabled.
2020-11-17 20:04:55 +01:00
Vladimír Čunát
280e27327d
knot-resolver: 5.1.3 -> 5.2.0
https://lists.nic.cz/pipermail/knot-resolver-users/2020/000318.html

NixOS service: we'll probably want to switch listenDoH
to the new 'doh2' kind, but let me leave that for later.
2020-11-11 15:51:54 +01:00
Vladimír Čunát
193e8bc722
knot-dns: 3.0.1 -> 3.0.2
https://gitlab.nic.cz/knot/knot-dns/-/tags/v3.0.2
2020-11-11 15:12:28 +01:00
Christoph Hrdinka
c6bb91c9db
Merge pull request #102617 from r-ryantm/auto-update/nsd
nsd: 4.3.2 -> 4.3.3
2020-11-05 08:48:24 +01:00
R. RyanTM
e763a9fd70 nsd: 4.3.2 -> 4.3.3 2020-11-03 11:55:51 +00:00
R. RyanTM
f06af68d0f coredns: 1.7.1 -> 1.8.0 2020-11-02 08:20:56 -08:00
Janne Heß
6404b25714
dnsdist: Replace myself with SuperSandro2000 2020-11-02 01:35:47 +01:00
rnhmjoj
8f897b0f9c
pdns-recursor: 4.3.5 -> 4.4.0 2020-10-29 08:34:13 +01:00
Mario Rodas
3692288f91
Merge pull request #101584 from r-ryantm/auto-update/dnsdist
dnsdist: 1.5.0 -> 1.5.1
2020-10-27 06:48:58 -05:00
Pierre Bourdon
02796d77f8
bind: 9.16.7 -> 9.16.8
https://bind9.readthedocs.io/en/v9_16_8/notes.html#notes-for-bind-9-16-8
2020-10-27 08:48:19 +01:00
Aaron Andersen
603f0dcae8 powerdns: 4.2.3 -> 4.3.1 2020-10-24 16:40:20 -04:00
R. RyanTM
d14027748b dnsdist: 1.5.0 -> 1.5.1 2020-10-24 18:33:26 +00:00
Aaron Andersen
fca065aff2 pdns-recursor: fix systemd configure flag 2020-10-18 08:15:29 -04:00
Vladimír Čunát
f886c4f282
Merge #97967: knot-dns: doInstallCheck = true
I thought I'd verify darwin through PR+borg, but now I'll just merge
and take action in case it breaks on darwin.
2020-10-17 01:13:46 +02:00
Martin Weinelt
f931e3e55d
pdns-recursor: 4.3.4 -> 4.3.5
Fixes: CVE-2020-25829
2020-10-13 14:18:16 +02:00
Aaron Andersen
6019fb179b powerdns: add nixos test to passthru.tests 2020-10-12 20:11:47 -04:00
Aaron Andersen
94c98805cb powerdns: compile with systemd support 2020-10-12 20:11:47 -04:00
Aaron Andersen
7b2b0cc77c powerdns: update configure flags 2020-10-12 20:11:47 -04:00
Aaron Andersen
1cd65c4185
Merge pull request #100335 from aanderse/pdns-cve
powerdns: 4.2.1 -> 4.2.3
2020-10-12 20:08:01 -04:00
Michele Guerini Rocco
47a3b4a57e
Merge pull request #100337 from aanderse/pdns-recursor
pdns-recursor: 4.3.3 -> 4.3.4
2020-10-12 21:13:13 +02:00
Aaron Andersen
75dd806963 pdns-recursor: add nixos test to passthru.tests 2020-10-12 13:55:38 -04:00
Aaron Andersen
84f8419899 pdns-recursor: 4.3.3 -> 4.3.4 2020-10-12 10:50:01 -04:00
Aaron Andersen
85fa83bfb1 powerdns: 4.2.1 -> 4.2.3 2020-10-12 10:38:06 -04:00
Aaron Andersen
176f45cd76
Merge pull request #100251 from aanderse/dnsdist-flags
dnsdist: update compile flags
2020-10-12 08:43:15 -04:00
Aaron Andersen
872cfe067e dnsdist: update compile flags 2020-10-11 11:02:55 -04:00
Vladimír Čunát
497248a558
knot-dns: 3.0.0 -> 3.0.1
https://gitlab.nic.cz/knot/knot-dns/-/tags/v3.0.1
2020-10-10 11:06:35 +02:00
Pierre Bourdon
2a4e6a93b9
bind: add nixosTests.bind to passthru.tests 2020-09-24 18:23:30 +02:00
Pierre Bourdon
c27c9bd380
bind: 9.14.12 -> 9.16.7 2020-09-24 18:10:16 +02:00
Vladimír Čunát
7de6e5de40
knot-dns: doInstallCheck = true 2020-09-14 11:20:52 +02:00
Vladimír Čunát
6847084284
knot-dns: libbpf is Linux-only
I should've noticed before pushing; I'm sorry.
2020-09-10 08:46:44 +02:00
Vladimír Čunát
d09738dd90
knot-dns: 2.9.6 -> 3.0.0
Upgrade should be pretty easy:
https://www.knot-dns.cz/docs/3.0/html/migration.html#upgrade-2-9-x-to-3-0-x

https://en.blog.nic.cz/2020/09/09/knot-dns-3-0-news/
https://gitlab.nic.cz/knot/knot-dns/-/tags/v3.0.0

For now, it's built with XDP support but the NixOS service
isn't ready for that yet.  I'll try to look at that sometime later.
2020-09-09 17:21:27 +02:00
Vladimír Čunát
3c45610ddd
knot-resolver: 5.1.2 -> 5.1.3
https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.1.3
2020-09-09 11:10:16 +02:00
Vladimír Čunát
63b6353782
knot-dns: Remove unnecessary runtime dependencies
Closure size: 261 -> 171 MiB.  (Only .bin was affected.)
2020-09-08 12:16:56 +02:00
Vladimír Čunát
1dbe47ced5
knot-dns: 2.9.5 -> 2.9.6
This is mostly a bug fix version with some small improvements.
https://gitlab.nic.cz/knot/knot-dns/-/tags/v2.9.6
2020-08-31 11:51:52 +02:00
zowoq
a83a88db05 buildGoPackage: remove platform.all from packages 2020-08-15 19:34:47 -07:00
Vladimír Čunát
01cf3b41aa
knot-dns: add libmaxminddb dependency
It's really small and some people might find it useful.
(If needed, its output could be split to make it even smaller.)
2020-08-13 08:19:58 +02:00
Timothy Stott
ba7c0893d4
treewide: remove obsolete attribute goPackagePath in buildGoModule derivations (#95092)
The buildGoModule infrastructure does not make use of goPackagePath it is a residue from buildGoPackage.
2020-08-11 21:04:55 +00:00
zowoq
cea7cd902e buildGoModule packages: set doCheck = false 2020-08-10 16:02:30 +10:00
R. RyanTM
98e8c6be06 pdns-recursor: 4.3.2 -> 4.3.3 2020-08-07 01:20:21 +00:00
Maximilian Bosch
0b6f0b7b07
Merge pull request #94399 from r-ryantm/auto-update/dnsdist
dnsdist: 1.4.0 -> 1.5.0
2020-08-04 23:23:47 +02:00
R. RyanTM
c90c363e64 dnsdist: 1.4.0 -> 1.5.0 2020-08-01 02:32:41 +00:00
zowoq
3c5750d1cd buildGoModule packages: editorconfig fixes 2020-07-31 13:58:04 +10:00
lf-
231e74dcbf ncdns: fix patch extension
The incorrect extension was confusing my code search tool.
2020-07-27 23:17:53 -07:00
R. RyanTM
1715eadebf nsd: 4.3.1 -> 4.3.2 2020-07-17 16:53:07 +00:00
Michele Guerini Rocco
400beaec1e
Merge pull request #92386 from r-ryantm/auto-update/pdns-recursor
pdns-recursor: 4.3.1 -> 4.3.2
2020-07-07 13:30:19 +02:00
Michele Guerini Rocco
fc553c0bc5
Merge pull request #89773 from rnhmjoj/ncdns
ncdns: init at 0.0.10.3
2020-07-07 10:58:55 +02:00
R. RyanTM
70e755c19a pdns-recursor: 4.3.1 -> 4.3.2 2020-07-05 23:04:23 +00:00
Vladimír Čunát
ec5ef6bd2b
knot-resolver: 5.1.1 -> 5.1.2
https://gitlab.nic.cz/knot/knot-resolver/-/tags/v5.1.2
I could highlight fixing the garbage collector on 32-bit systems.
2020-07-01 16:20:49 +02:00
Félix Baylac-Jacqué
7020dc8eac
nixos/nsd: symlink conf file to /etc/nsd
We remove the configFile build flag override in the NixOS module.

Instead of embedding the conf file link to the binaries, we symlink it
to /etc/nsd/nsd.nix, the hardcoded config file location for the
various CLI nsd utilities.

This config file build option override is triggerring a nsd rebuild
for each configuration change. This prevent us to use the nixos cache
in many cases.

Co-authored-by: Erjo <erjo@cocoba.work>
2020-06-26 20:18:33 +02:00
Félix Baylac-Jacqué
15c8a4800e
nsd: set passthru.tests 2020-06-26 17:56:06 +02:00
Matt Layher
6b9c728ef9 coredns: 1.6.9 -> 1.7.0 2020-06-19 09:01:44 -04:00
R. RyanTM
aecc33be22 coredns: 1.7.0 -> 1.7.1 2020-09-25 04:10:11 +00:00
Justin Humm
6cdbb1fb1f
bind: set BUILD_CC for cross compilation
This is due to a hint by @Ericson2314 in
https://github.com/NixOS/nixpkgs/pull/86166#issuecomment-633153996
2020-06-15 21:03:03 +02:00
rnhmjoj
8ff681a7ca
ncdns: add test to passthru.tests 2020-06-14 01:16:12 +02:00
rnhmjoj
5ec0bd7649
ncdns: init at 0.0.10.3 2020-06-14 01:09:32 +02:00
Vladimír Čunát
da752902c1
knot-dns: 2.9.4 -> 2.9.5
There's a bugfix important for some auto-signer setups.
https://gitlab.labs.nic.cz/knot/knot-dns/-/tags/v2.9.5

$ nix build -f nixos/release-combined.nix nixos.tests.knot.x86_64-linux
2020-05-25 10:56:49 +02:00
Vladimír Čunát
d0d90908c8
knot-resolver: 5.1.0 -> 5.1.1 (security)
https://en.blog.nic.cz/2020/05/19/nxnsattack-upgrade-resolvers-to-stop-new-kind-of-random-subdomain-attack/
2020-05-19 11:29:33 +02:00
Vladimír Čunát
13c485d63d
bind: 9.14.11 -> 9.14.12 (security)
https://www.isc.org/blogs/bind9-vulnerabilities-2020-05/
$ nix build -f nixos/release.nix tests.bind.x86_64-linux
2020-05-19 11:21:25 +02:00
Vladimír Čunát
6bf49e3777
pdns-recursor: 4.3.0 -> 4.3.1 (security)
https://doc.powerdns.com/recursor/changelog/4.3.html#change-4.3.1
It fixes DoS CVEs; details e.g. on http://www.nxnsattack.com/

$ nix build -f nixos/release.nix tests.pdns-recursor.x86_64-linux
2020-05-19 11:20:51 +02:00
Colin L Rice
d6162dab50
go-modules: Update files to use vendorSha256 2020-05-14 07:22:21 +01:00
R. RyanTM
bf707710af nsd: 4.3.0 -> 4.3.1 2020-05-06 10:34:36 -07:00
Vladimír Čunát
2147dd0648
knot-dns: 2.9.3 -> 2.9.4
https://gitlab.labs.nic.cz/knot/knot-dns/-/tags/v2.9.4
2020-05-05 09:20:32 +02:00
Vladimír Čunát
26d3ae2f24
knot-resolver: 5.0.1 -> 5.1.0
https://gitlab.labs.nic.cz/knot/knot-resolver/-/tags/v5.1.0

The upcoming major version will contain reworked
hints/policy/prefill/rebinding/view modules and related functionalities.
Please participate in the following survey to ensure we do not forget
about your particular use-case:
https://www.knot-resolver.cz/survey/
It will help us to improve Knot Resolver. Thank you!
2020-04-29 17:38:21 +02:00
Peter Hoeg
53c14c4e65
Merge pull request #81365 from peterhoeg/p/https-dns
https-dns-proxy: init at unstable-20200419
2020-04-20 14:06:40 +08:00
Peter Hoeg
93df15d79a https-dns-proxy: init at unstable-20200419 2020-04-20 13:36:59 +08:00
Michael Reilly
84cf00f980
treewide: Per RFC45, remove all unquoted URLs 2020-04-10 17:54:53 +01:00
R. RyanTM
8866b7d72f coredns: 1.6.7 -> 1.6.9 2020-04-01 10:17:44 +00:00
Jörg Thalheim
066db11215
Revert "Merge pull request #83099 from marsam/fix-buildGoModule-packages-darwin"
This reverts commit 4e6bf03504, reversing
changes made to afd997aab6.

Instead we propagate those frameworks from the compiler again
2020-03-27 07:33:21 +00:00
Mario Rodas
36ae531bc2 coredns: fix build on darwin 2020-03-21 04:46:00 -05:00
R. RyanTM
ad1aff582f nsd: 4.2.4 -> 4.3.0 2020-03-19 12:08:16 -07:00
Jörg Thalheim
c5967df712
Merge pull request #82531 from r-ryantm/auto-update/coredns
coredns: 1.6.6 -> 1.6.7
2020-03-16 15:34:21 +00:00
Vladimír Čunát
47f61c9d7f
bind: 9.14.10 -> 9.14.11 (small bugfix)
I see just a single small bugfix in the news:
https://downloads.isc.org/isc/bind9/9.14.11/RELEASE-NOTES-bind-9.14.11.html
2020-03-15 09:15:41 +01:00
R. RyanTM
5389e95ce0 coredns: 1.6.6 -> 1.6.7 2020-03-14 04:28:21 +00:00
R. RyanTM
2c76b3d8d7 pdns-recursor: 4.2.1 -> 4.3.0 2020-03-09 01:24:14 +00:00
Vladimír Čunát
b7f5450e4d
knot-resolver: apply upstream patch
Encrypted ZFS users were affected, in particular some NixOS users
who reported the issue upstream.  Close #81188.
2020-03-04 13:36:54 +01:00
Vladimír Čunát
29a7464115 knot-dns: 2.9.2 -> 2.9.3
https://gitlab.labs.nic.cz/knot/knot-dns/-/tags/v2.9.3
2020-03-03 11:18:02 +01:00
Jörg Thalheim
6adc09ed30
knot: put runtime paths outside the nix store
Otherwise knot tries to write to non-writable directories.
This for example breaks dnssec signing.
While it's possible to overwrite these path in the configuration,
having a sane defaults is nicer.
2020-02-12 16:27:38 +00:00
Frederik Rietdijk
419bc0a4cd Revert "Revert "Merge master into staging-next""
In 87a19e9048 I merged staging-next into master using the GitHub gui as intended.
In ac241fb7a5 I merged master into staging-next for the next staging cycle, however, I accidentally pushed it to master.
Thinking this may cause trouble, I reverted it in 0be87c7979. This was however wrong, as it "removed" master.

This reverts commit 0be87c7979.
2020-02-05 19:41:25 +01:00
Frederik Rietdijk
0be87c7979 Revert "Merge master into staging-next"
I merged master into staging-next but accidentally pushed it to master.
This should get us back to 87a19e9048.

This reverts commit ac241fb7a5, reversing
changes made to 76a439239e.
2020-02-05 19:18:35 +01:00
Vladimír Čunát
baeed035ea
Merge #78628: knot-resolver: 4.3.0 -> 5.0.1
The service needed lots of changes. A few smaller changes
are added into the PR, e.g. replacement for PR #72014.
See the commit messages for details.
2020-02-05 16:57:02 +01:00
Vladimír Čunát
e3edb004c6
knot-resolver: 5.0.0 -> 5.0.1
https://gitlab.labs.nic.cz/knot/knot-resolver/tags/v5.0.1
2020-02-05 16:53:40 +01:00
Vladimír Čunát
ae74a0e27c
(nixos/)knot-resolver: 4.3.0 -> 5.0.0
Minor incompatibilities due to moving to upstream defaults:
  - capabilities are used instead of systemd.socket units
  - the control socket moved:
    /run/kresd/control -> /run/knot-resolver/control/1
  - cacheDir moved and isn't configurable anymore
  - different user+group names, without static IDs

Thanks Mic92 for multiple ideas.
2020-01-31 15:22:52 +01:00
Vladimír Čunát
93ad21dedd
knot-resolver: remove older lua path workarounds
Part of this is approximate revert of commit f0d2da43a7.
2020-01-31 15:06:20 +01:00
Vladimír Čunát
e980e7a3ab
knot-resolver: enable checks on aarch64
The cqueues fix is in nixpkgs already, so it works now.
2020-01-30 18:48:57 +01:00
Niklas Hambüchen
43a62af3a1
Merge pull request #78561 from r-ryantm/auto-update/bind
bind: 9.14.9 -> 9.14.10
2020-01-27 14:27:45 +01:00
R. RyanTM
0c59818ce7 bind: 9.14.9 -> 9.14.10 2020-01-26 15:58:22 +00:00
Vladimír Čunát
1ee3c7b405
Revert "knot-resolver: skip a broken test"
This reverts commit 5c0567dcc6.
The issue had been fixed but I forgot to remove this workaround.
2020-01-25 13:42:46 +01:00
Christoph Hrdinka
03c8eca08b
Merge pull request #76340 from r-ryantm/auto-update/nsd
nsd: 4.2.3 -> 4.2.4
2019-12-29 11:01:46 +01:00
Peter Simons
bc555a24af
Merge pull request #76209 from r-ryantm/auto-update/bind
bind: 9.14.8 -> 9.14.9
2019-12-27 12:17:36 +01:00